Improve production Dockerfile (#256)

Author: Cito

Dockerfile

@@ -4,23 +4,24 @@ RUN apk upgrade --no-cache --available
 
 # BUILDER: a container to build the service dist directory
 FROM base AS builder
-# install pnpm
-RUN npm install --global corepack@0.32.0
-RUN corepack prepare pnpm@10.26.0 --activate
+# install pnpm via corepack
+RUN corepack enable && corepack prepare pnpm@10.26.0 --activate
 # install static web server
-RUN apk add curl jq sudo which
+RUN apk add --no-cache curl jq sudo which
 RUN curl --proto '=https' --tlsv1.2 -sSfL https://get.static-web-server.net | sed "s/cp -ax/cp -a/g" | sh
 # build the service
 WORKDIR /service
 COPY package.json pnpm-lock.yaml ./
 RUN pnpm install
 COPY . .
-RUN npm run build
+RUN pnpm run build
 # create base package.json with just name and version
 RUN jq '{name, version, type}' package.json > ./package.json.run
 
 # RUNNER: a container to run the service
 FROM base AS runner
+# install pnpm via corepack
+RUN corepack enable && corepack prepare pnpm@10.26.0 --activate
 RUN adduser -D appuser
 WORKDIR /home/appuser
 USER appuser
@@ -30,17 +31,19 @@ COPY --from=builder /service/dist/data-portal/browser ./dist
 COPY --from=builder /usr/local/bin/static-web-server /usr/local/bin
 # copy the base package.json with name and version
 COPY --from=builder /service/package.json.run ./package.json
-USER root
-# make some dirs and files writeable for the appuser
-RUN touch ./dist/config.js && chown appuser ./dist ./dist/config.js ./package.json
-USER appuser
 # install run script
 COPY run.js ./run.mjs
 # install dependencies for run script
-RUN npm install js-yaml
+RUN pnpm add --prod --no-cache js-yaml
 # install configuration files
 COPY data-portal.default.yaml .
 COPY sws.toml .
+USER root
+# remove npm, corepack, and pnpm to trim the image and avoid outdated dependencies
+RUN rm -rf /usr/local/lib/node_modules /home/appuser/.local/share/pnpm /home/appuser/.cache
+# make some dirs and files writeable for the appuser
+RUN touch ./dist/config.js && chown appuser ./dist ./dist/config.js ./package.json
+USER appuser
 
 ENTRYPOINT ["node"]
 CMD ["/home/appuser/run.mjs"]

package.json

@@ -1,6 +1,6 @@
 {
   "name": "data-portal",
-  "version": "2.3.1",
+  "version": "2.3.2",
   "scripts": {
     "ng": "ng",
     "start": "ng serve",
@@ -26,11 +26,6 @@
   "packageManager": "pnpm@10.26.0",
   "type": "module",
   "private": true,
-  "pnpm": {
-    "overrides": {
-      "glob": "^13.0.0"
-    }
-  },
   "dependencies": {
     "@angular/animations": "^21.0.5",
     "@angular/cdk": "^21.0.3",